Signify
Signify, a portmanteau of signature and verify, is a Python module that provides validation and inspection of digital code signatures. These types of signatures are used to verify the authenticity and integrity of executable code, providing assurance about who published a piece of software and whether is has been altered since it was signed.
This library is mostly intended for malware analysts and security professionals to allow validation of these signatures outside their normal ecosystem and enable close inspection of the available data.
Currently, this library is only able to verify Windows Authenticode signatures, the specific Microsoft technology that is used in Windows to verify software integrity. Typically, Authenticode signatures are embedded into the file itself, without altering the functionality of the software. However, these signatures can also be provided by external Authenticode catalogs (.cat files), allowing virtually any file to be signed using this technology.
The following file types are supported, with support for other file types being expected:
PE executables (.exe, .dll and various other Windows executables)
MSI files (.msi)
Catalog files (.stl and .cat)
Any flat file that is signed through a catalog file
This module is compatible with Python 3.9+.
Installation
Installation is very simple:
pip install signify
Support for some file types (including MSI) requires:
pip install signify[full]
Documentation
Documentation is available at http://signify.readthedocs.io/en/latest/ or in the docs/ directory.
Thanks
Huge thanks to Germano Caronni for writing the original code in the verify_sigs project, on which this project was based.
A multitude of significant improvements and modifications was made on top of their original contribution, including improving PE signature support, adding support for various other files, and moving the original scripts into a modern Python module.
1 maintainer
Metadata
1 maintainer
Release files for signify 0.9.3
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| signify-0.9.3.tar.gz | 90.5 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| signify-0.9.3-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 179.0 kB
Release files / signify-0.9.3.tar.gz
| Download URL | signify-0.9.3.tar.gz |
|---|---|
| Size | 90.5 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
0310558c26c1425f904b21b4cba3477443e233128eea4117fd97fe1808227db0
|
|
BLAKE2b-256 checksum How to use checksums |
ab2311eb9cc568a3edddf50b5f45e066d061547439a4b62cb8e634e990a19686
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.1.0 CPython/3.13.5
|
Release files / signify-0.9.3-py3-none-any.whl
| Download URL | signify-0.9.3-py3-none-any.whl |
|---|---|
| Size | 88.5 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
c67f327e34e480e18ff7c4d56f48703dc40e12bd77a4cccfebc0fd0e1fd4e3da
|
|
BLAKE2b-256 checksum How to use checksums |
4bb0f5abe7f68ecbbe71c143915af02ed47a6b675bbbd708f3baf73f4f07447c
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.1.0 CPython/3.13.5
|
